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Abstract 

This paper contains introductory material on Petri nets and Grobner basis theory and makes 
some observations on the relation between the two areas. The aim of the paper is to show how 
Grobner basis procedures can be applied to the problem of reachability in Petri nets, and to give 
details of an application to testing models of navigational systems. 

1 Introduction 

Petri nets are a graphical and mathematical modelling tool applicable to many systems. They may 
be used for specifying information processing systems that are concurrent, asynchronous, distributed, 
parallel, non-deterministic, and/or stochastic. Graphically, Petri nets are useful for illustrating and 
describing systems, and tokens can simulate the dynamic and concurrent activities. Mathematically, 
it is possible to set up models such as state equations and algebraic equations which govern the be- 
haviour of systems. Petri nets are understood by both practitioners and theoreticians and so provide 
a powerful communication link between them. For example, engineers can show mathematicians how 
to make practical and realistic models and mathematicians may be able to produce theories to make 
the systems more methodical or efficient, which is in fact demonstrated by this collaborative paper. 



The area of computer algebra called Grobner basis theory includes the rewriting theory widely used in 
computer science and provides methods for handling the rule systems defining various types of alge- 
braic structure. It has been proved that it is not always possible to deduce all consequences of a system 
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of rules - when it is possible the levels of complexity involved quickly require the use of computers. 
In the commutative case computational Grobner basis methods have has been successfully applied in 
theorem proving, robotics, integer programming, coding theory, signal processing, enzyme kinetics, 
experimental design, differential equations, and many others. All major computer algebra packages 
now include implementations of these procedures, and pocket calculator implementations will soon be 
available. A collection of recent papers on Grobner basis research is 

In this paper we show how Grobner basis procedures can be applied to reversible Petri nets to solve 
the reachability problem. This provides a practical test which can be useful in the design and analysis 
of Petri nets. In particular the examples show a practical application of the Grobner basis methods 
to Petri nets modelling navigation systems. Further details of these mechatronic navigation systems 
can be found in ||. Related algebraic research, and preliminaries to this paper may be found in ||]. 

2 Background to Grobner Bases 

We give a brief summary of the main results in commutative Grobner basis theory that will be used 
in this paper. For a fuller introduction to the subject see [|], ||. 

Let A be a set. Then the elements of A A are all power products of elements of A, including an 
identity 1, with multiplication defined in the usual way. The commutativity condition is summarised 
by xy = yx for all x, y G A. Let A be a field (the field of rational numbers, Q suffices for our work). 
Then A[A A ] is the ring of commutative polynomials 

/ = kimi H h k t m t 

where ki, . . . ,kt € K and mi, ... ,rrit £ A A with the operations of polynomial addition and polyno- 
mial multiplication defined in the usual way. 

Consider a set of polynomials P C A[A A ]. We say that two polynomials / and g of A[A A ] are 
equivalent modulo P and write / =p g if their difference can be expressed in terms of P, i.e. 

f - g = uipi H h u n p n 

for some p±, ■ ■ ■ ,p n G P,u%, ■ ■ ■ ,u n € A[A A ]. 

In 1965 Bruno Buchberger invented the concept of a Grobner basis ||]. Techniques of Grobner basis 
theory enable us to decide whether or not f =p g for given P, f, g in A[A A ] as above. 

Computation begins by specifying an ordering > on the power products (this must be a well-ordering, 
compatible with multiplication) . This enables us to define reduction modulo a set of polynomials P - 
multiples of polynomials in P are subtracted from a given polynomial / in order to obtain successively 
smaller polynomials - the reduction is denoted — >p. The reflexive, symmetric, transitive closure of 
— >P coincides with the congruence =p. If P is a Grobner basis then — >p is confluent, meaning that 
there is a unique irreducible element in each congruence class, obtainable from any other element by 
repeated reduction modulo P. If P is not a Grobner basis then it is always possible to use Buchberger's 
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algorithm to obtain a set of polynomials Q which is a Grobner basis such that =p coincides with =q. 

Thus, given a set of polynomials P C the problem of deciding whether / is equivalent to g 

modulo P for any f,g in A^[X A ] can always be determined by calculating a Grobner basis Q. The 
polynomials are equivalent if and only if their difference f — g reduces modulo Q to zero. 

We will not explain these calculations in any greater detail, but refer the reader to texts on Grobner 
bases, such as pi |5[ . In the commutative case it is always possible to determine a Grobner basis, but 
computers are usually required for all but the most basic problems. In our examples we use MAPLE 
and GAP3, with some Grobner basis procedures implemented by the second author ||. 



3 Petri Nets 



A Petri net has two types of vertices: places (represented by circles) and transitions (represented by 
double lines). Edges exist only between places and transitions and are labelled with their weights. In 
modelling, places represent conditions and transitions represent events. A transition has input and 
output places, which represent preconditions and postconditions (respectively) of the event. A good 



introduction to the ideas of Petri nets is 112 



Definition 3.1 (Petri Net) A Petri net (without specific initial marking) is a quadruple N_ = 
(X,T,J-,w) where: X is a finite set (of places), T is a finite set (of transitions), J- C (X xT)L)(T x X) 
is a set of edges (flow relation) and w : T — > N is a weight function. 

The state of a system is represented by the assignation of "tokens" to places in the net. 

Definition 3.2 (Marking) A marking is a function M:X->NU {0}. 

Dynamic behaviour is represented by changes in the state of the Petri net which is formalised by the 
concept of firing. 



Definition 3.3 (Firing Rule) 



i) A transition t is enabled if each input place x of t is marked with at least w(x,t) tokens. 

ii) An enabled transition may or may not fire - depending on whether or not the relevant event 
occurs. 

Hi) Firing of an enabled transition t removes w(x,t) tokens from each input place x of t and adds 
w(t,y) tokens to each output place y oft. 

Despite their apparant simplicity, Petri nets can be used to model complex situations - for some ex- 
amples see [f?J. One of the main problems in Petri net theory is reachability - the problem corresponds 
to deciding which situations (modelled by the net) are possible, given some sequence of events. 
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Definition 3.4 (Reachability) A marking M\ is said to be reachable from a marking M2 in a net 
N , if there is a sequence of firings that transforms M2 to M\. Often a Petri net comes with a specified 
initial marking Mq. The reachability problem for a Petri net N with initial marking Mq is: Given 
a marking M of N_, is M reachable in JV ? 

For the type of Petri nets defined so far, reachability is decidable in exponential time and space fl2|| . 

Reversibility is a property of Petri nets corresponding to the potential for the device being modelled 
to be reset. For our applications it is essential that we can reset, therefore this property is vital. 

Definition 3.5 (Reversibility) A Petri net N is called reversible if a marking M' is reachable 
from a marking M in N, then M is reachable from M' . 

Different definitions of reversibility exist. The definition we use is chosen for engineering rather than 
mathematical reasons as in |12|| . The paper [Q] by Caprotti, Ferscha and Hong contains a result appar- 
ently similar to ours, but they use a different definition of reversibility, which is much more restrictive 
- perhaps this is appropriate for different applications. 

In order to apply Grbbner basis techniques we use monomials to represent the markings (there is a 
one-to-one correspondence between monomials and markings), and so associate a transition with the 
difference between two monomials (input and output). 

Definition 3.6 (Polynomial Associated with a Marking) Let N_ = (X, T, J 7 , w) be a Petri net. 
To every marking M we will associate a polynomial 

pol{M) := \\ x M{ - x \ 
x 

that is the formal product of elements of X raised to the power M(x) (the number of tokens held at 
the place x ). 

Definition 3.7 (Polynomial Associated with a Transition) Each transition t has an associated 
polynomial 

P oi(t) : = Yl x w(x ' t] - n y w[t ' y) i 

X X 

that is the input required for the transition to be enabled minus the output resulting from a firing. We 
often write pol(t) = I — r, to distinguish the two terms. 

To represent the dynamic structure we must consider how the transition polynomials are related to 
polynomials of markings which enable them and how firings of transitions affect the polynomials of 
the markings. Suppose a marking Mj enables a transition t{. By the definitions it is clear that 
this corresponds to pol(Mi) being equal to U{ I4 where pol(ti) = I4 — n and Ui is a power product in 
X A . It then follows that if ti fires, the resulting marking Mj+i will have polynomial pol(Mi + \) = 

pol(Mi) - Uipol(U) =UiTi. 
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Example 3.8 (Polynomials and the Firing Rule) 



Not enabled 
Ready 00 /»0 vector chan § e 



interpret 

speed and , T3 

direction 

interpreted 
data 
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3 6 



T3 
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The diagrams above show three different states of a transition t% of a Petri net Example |3.13| . The 
polynomial associated with the transition is pol{t^) = x%x§ — X4. The first marking M\ does not 
enable £3; this corresponds to the fact that pol{M\) = (xq) 2 is not a multiple of x%xq. The second 
marking M2 does enable £3, and pol{M2) = Xs(xq) 2 . The marking resulting from the firing of t% after 
it has been enabled by M2 is M3. In terms of polynomials the firing is represented by pol{M^) = 

pol{M2) — xepol(ts) = X4X6. A firing sequence is denoted by Mq Mi % ■ ■ ■ M n where the Mj are 
markings and the t\ are transitions (events) transforming into Mj. In terms of polynomials the 

above firing sequence gives the information pol(M n ) = pol(Mo) — u\ pol{t\) — U2pol{t2) — ■ ■ ■— u n pol(t n ) 
for some U\,U2, ■ ■ ■ ,u n G X^. 



Theorem 3.9 (Reachability and Equivalence of Polynomials) 

Let N_be a reversible Petri net with initial marking Mq. Define P := {pol(t) : t € T}. Then a marking 
M is reachable in N_ if and only if pol(Mo) =p pol(M). 

Proof First suppose that M is reachable. Then there is a firing sequence M ^ Mi A ■ ■ ■ 
M n _i M. Therefore, as above, there exist u±,... ,u n € X A such that pol(Mo) — pol(M) = 
uipol{t\) + ■ ■ ■ + u n pol(t n ). Hence pol(Mo) =p pol(M). 

For the converse, suppose pol(Mo) =p pol(M). Then 

pol(Mo) = pol(M) ± uipol{ti) ± • • • ± u m pol(t m ). 
The proof is by induction on to. 

For the base step put to = then pol(Mo) = pol(M). The correspondence between markings and 
their associated polynomials is one-to-one, so here Mq = M and M is clearly reachable. 

For the induction step we assume that a marking M' is reachable from Mq if 

PoI(Mq) = pol(M') ± u\pol{ti) ± • • • ± u m -ipol{t m -i). 
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for a fixed m. Now suppose M is a marking such that 

pol(Mo) = pol(M) ± u\pol(t\) ± • • • ± u m pol(t m ). 

Then for some i € {1, . . . , m} either pol(Mo) = Uik or pol(Mo) = u^i where pol(U) = k — r\. 

In the first case pol(Mo) = Uj/j. Observe that Mo enables tj and define a marking M' by Mo M'. 
Then 

pol(M') = pol(M) ± uipol(ti) ± ■ ■ ■ ± Ui-ipol(U-i) ± u i+ ipol(t i+1 ) ± ■ ■ ■ ± u m pol(t m ) 

so, by assumption, M is reachable from M' and so M is reachable from Mo- 

In the second case pol(Mo) = UjT-j. There is a marking M' such that pol(M') = u^i and 

pol(M') = pol(M) ± uipoZ(ii) ± ■ • ■ ± Ui-ipol{ti-i) ± u i+1 pol(t i+1 ) ± ■ ■ ■ ± u m pol(t m ). 

Now, M is reachable from M' by assumption and Mo is reachable from M' by a firing of tj. By 
reversibility, therefore, M' is reachable from Mo and hence M is reachable from Mo. □ 

Corollary 3.10 (Grobner Bases Determine Reachability) 

Reachability in a reversible Petri net can be determined using a Grobner basis. 

Proof Let K be a field. First observe that P C X[X A ]. Let Q be a Grobner basis for P. Then 
pol(M) =p pol(Mo) if and only if there exists p G K[X A ] such that pol(M) and pol(Mo) reduce to p 
by — >Q- □ 

Remark 3.11 (Catalogue of Reachable Markings) Recall that Grobner bases techniques use an 
ordering on the power products. There is a one-to-one correspondence between power products and 
markings. We can begin to catalogue the markings in increasing order. Given a Grobner basis for the 
polynomials of the transitions of a Petri net it can be determined whether each marking is reachable: 
if the power product reduces to the same irreducible power product as the initial marking then it is 
reachable. In this way the Grobner basis can be used to build up a list of reachable markings. 

Remark 3.12 (Testing for Reversibility in Petri Net Design) The reversibility of a Petri net 
can be interpreted as the ability to reset the application it models. Whilst the reachability of a place, 
given an initial marking, can be determined by standard means, reversibility cannot be established 
directly. 

Calculating a Grobner basis for the Petri net makes the determination of reachable markings much 
more obvious, and unwanted markings can be immediately detected. There are two reasons why 
unwanted markings may occur. In the first case there is a basic error in the net which allows some 
firing sequence of marking which should be avoided; the Grobner basis is effective in showing up these 
markings. The second type of problem occurs when marking supposed to be unreachable is found 
to be reachable, the implication here being that the net is not truly reversible. As reversibility is a 
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desirable property, the net can then be modified and retested. 

In practical terms Grobner bases have been shown by the authors to be useful in Petri net design - 
repeated testing by computing Grobner bases shows up unintended effects or non-reversibility. Our ex- 
amples are Petri nets designed by the first author to model software interfaces to hardware components 
of mobile robot navigation systems, and their development was helped in this way. 

Example 3.13 (Software Interface for Motors) This Petri net represents the software interface 
between a user and the set of motors used to drive a mobile robot. 

initialise 




interpret speed 
and direction 





Here, once the motors have been initialised, the user may input the required speed and direction for 
each motor. This information is then interpreted and written to the relevant port, if there is also a 
token available in the "ready" place (3), to enable the "interpret speed and direction" transition t 3 . 
The places are labelled x%, . . . ,x\\. There are eight transitions, and their polynomials are as follows: 

pol(t\) = X\ — X 2 X 3 pol(t 2 ) = X2 — X-j pol(t 3 ) = X 3 Xq — X4 pol{ti) = X4 — X5 

pol(t 5 ) = x 7 - x 6 pol(t&) = x 5 - x 3 x 8 pol(t 7 ) = x 3 x 8 - xi pol(t$) = x 8 - x 7 
The Grobner basis for this set of polynomials - with respect to a degree-lexicographic ordering - is 

{X4-X 1} x 5 -xi, x 6 -x 2 , x 7 -x 2 , x 8 -x 2 , X 2 X Z -Xl\. 

The catalogue of markings reachable from an initial marking x\ is quickly calculated to be: 

{xi, x 4 , x 5 , x 2 x 3 , x 3 , XQ, x 3 x 7 , X 3 Xg}. 
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This catalogue can be examined by the Petri net designer who interprets the different states. When 
unexpected states appear in the catalogue it indicates an error, which generally signifies that the net 
is not reversible. 



For Petri nets such as this to execute efficiently, it is essential that the user can confirm both the 
reachability and the reversibility of the net. For instance, should the place "done" (5) prove to be 
unreachable from an initial marking where the place "start" (1) held a token, this would show that 
no data would be written to the port in transition "write to port" (£4), thus making the motors 
uncontrollable. If the net here was non-reversible, it would indicate that the motors could not be 
disabled, which in this situation is undesirable. Once the Petri net has been tested for such bugs, the 
user need only concern themselves with the simple functions executed within individual transitions, 
greatly decreasing the likelihood of a serious, or perhaps dangerous, failure of the robot. 



4 Coloured Petri Nets 

A coloured Petri net circulates tokens of more than one type. The transitions in the net are af- 
fected differently by different combinations of colours of tokens. An example of this is where tokens 
represent data signals. Incomplete or corrupt signals should be dealt with differently from complete 
signals, these two types of data would be represented by different colours of tokens ("pass" and "fail" 



in Example 4.3). 



Recall that if C is a set (of colours) then C A is the set of all power products of elements of C. 
Essentially an element of C A assigns a non-negative integer to each element of C. The definition of a 
coloured Petri net that we give uses this kind of notation, but is equivalent to that given by Murata 
in [12]. One element m of C A is said to be a multiple of another element I if m = ul for some u € C A . 



Definition 4.1 (Coloured Petri Net) A coloured Petri net is a quintuple N_ c = (X, T, C, .F, w), 

where X is a set of places, T is a set of transitions, C is a set of colours, T C {X x T) U (T x X) is 
the flow relation and w : T —* C A . A marking in N_ c is a function M : X —* C A . The firing rule 
is as follows: 

i) A transition t is enabled if each input place x of t is marked with a multiple of w(x,t). 

ii) An enabled transition may or may not fire. 

Hi) A firing of an enabled transition t deletes the power product w(x,t) from the marking at each 
input place x, and appends the marking at each output place y with the power product w(t,y). 

A coloured Petri net can in fact be considered as a structurally folded version of an ordinary Petri net 
if the number of colours is finite. Each place x is unfolded into a set of places, one for each colour of 
token which x may hold, and each transition t is unfolded into a number of transitions, one for each 
way that t may fire. It is immediate that the techniques discussed in the previous section may be 
applied to coloured Petri nets. In fact we can pass directly from the coloured Petri net to commutative 
polynomials in K[(X x C) A ], where K is a field. Elements of (X x C) A are written (x\, c\) ■ ■ ■ (x n , c n ), 
where x\, ■ ■ . ,x n £ X, and ci, . . . , c„, G C. We define (xj, Ci)(xj,Cj) = (xj, C{Cj) when Xi = Xj. 
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Theorem 4.2 (Grobner Bases for Coloured Petri Nets) 

Let N_q be a coloured Petri net. If M is a marking in N_q, then define the polynomial associated with 
the coloured marking to be pol(M) := Y\ x (x, M(x)). Similarly if t is a transition in N_ c , then define 
the polynomial associated with the coloured transition to be pol(t) := Yl x ( x > w ( x > *)) ~~ Ilx(y> w (t> v)) m 

From these definitions we observe that a transition t in a coloured Petri net has an associated polyno- 
mial of the form pol{t) = I — r where l,r G (X x C) A . The transition t is enabled by a marking M if 
pol(M) = ul, for some u £ {X x C) A . 1ft fires then the new marking has associated polynomial ur. 
It follows that if we define P := {pol(t) : t G T} then a marking M is reachable if and only if 
pol(M) =p pol(Mo). Therefore if Q is a Grobner basis for P it is decidable whether or not M is 
reachable in N. 

The results (and proofs) are naturally very similar to the results for standard Petri nets. The value is 
in the application - where it is more efficient to work with coloured nets it is appropriate to associate 
polynomials to these models directly. 

Example 4.3 (Software Interface for Compass) The following Petri net shows the software in- 
terface to an external compass, where the compass provides data in the form of an ASCII string. 
The states here are numbered, but two types of token: "pass" (x) and "fail" (y), circulate in the net. 
This Petri net is initialised with a single "pass" (x) token at the "start" place (1) together with a 
"pass" (x) and a "fail" (y) token in each of the places "input" (18) and "continue" (19). The ad- 
ditional tokens at (18) and (19) provide the colouring essential for rigorous testing of this Petri net. 
For instance, when the "return data" t 3 or t 2 o transition is fired, the colour of the token output to 
place "raw data ready" (3) depends solely on the colour of the token from place "input" (18). The 
transitions "read in" £4 or £21 , "calculate checksum" £5 or £22 and "test" ig or *23 will output a token 
matching the input token, having no effect on the colouring, but the transition "find bearing" t-j will 
only be enabled by a "pass" token, which represents a received ASCII string with a correct checksum, 
as determined in the "test" t$ or £23 transition. A "fail" token would instead enable the transition 
"data request" t±Q, which will provide a value using dead reckoning in place of the corrupted data. 

Colouring of this net is helpful, as it ensures that only complete uncorrupt data is used. The Petri 
net of this example was constructed by repeated testing using Grobner basis methods. We use Xi to 
denote a "pass" token at place i, and y{ to denote a "fail" token at place i. The initial marking is 
therefore associated with the monomial Xixi8£i92/i82/i9- The set P of polynomials associated with the 
transitions is as follows: 

x\ - x 2 x 4 , x 5 - X12, x 2 xi 8 - x 3 xi 8 , y 2 yis ~ 2/32/18, X3X13 - x 6 , y 3 x 13 - y 6 ,x 6 - x 7 , y 6 - y 7 , 
X7-X8, 2/7-2/8, X 8 -Xi , X12 - X13, X11-X2X14, X14X19 - X15X19, a;i4yi9-yi5yi9, 2/15 - X17, 
X3X17-X16, 2/3X17 - Xi6, X 2 Xi7-Xi 6 , X15 - X12, X4-X5, 2/8 -Xg, Xg-Xn, Xio-Xn, X iG - X\. 

Using MAPLE a Grobner basis Q for P with respect to the order tdeg has 47 rules 
Given the initial marking xiXi8Xi9|/i82/i9j there are 11 reachable markings having five tokens and 32 
reachable markings having six tokens. Examining the catalogue of reachable states and relating them 
to the situations they represent will confirm that the net will behave as the user would expect. 
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5 Further Considerations 



5.1 Boundedness 

Another interesting property is boundedness - the maximum number of tokens that may exist at a 
particular place or the maximum number of tokens that can exist in the entire net -given an initial 
marking. It is obvious to see how the catalogue may be used to check either type of boundedness, but 
more interesting to observe that certain information may be derived directly from the (tdeg) Grobner 
basis. If the Grobner basis contains only polynomials I — r (assume I > r) such that I and r are power 
products of the same total degree then all reachable markings will have the same number of tokens. 
The least number of tokens possible is the degree of the reduced form of the polynomial associated 
with the initial marking. Regarding the polynomials I — r as reduction rules I — > r we can sometimes 
determine the most number of tokens possible by examining the degree-reducing rules to find what 
multiples of the reductum can be reduced to the same form as the initial marking (it was possible to 
do this with the 47 rule Grobner basis obtained for our last example). 



5.2 Use and Efficiency 

Similarly to @ we point out that although in general Grobner basis computation can be lengthy, the 
type arising from Petri nets are not usually complex, involving only two-term polynomials with unitary 
coefficients. There is no problem, in any case with ordinary or coloured Petri nets, as commutative 
Grobner bases can always be found, using a computer algebra package (e.g. MAPLE). 

Although it is possible to make use of existing implementations of Buchberger's Algorithm it would be 
practical to include the Grobner basis procedures as part of the software in our mechatronic navigation 
systems. One aim of the research in || is to provide an easier way of safely programming a mobile 
robot. By using a Petri net to model the navigation system the C code controlling the robot is split 
into small pieces, corresponding to the transitions in the net. A transition can be programmed in a few 
lines, and code for a selection of alternative transitions could be provided in advance. The structure 
of the net corresponds to the structure of the executable program, and thus by replacing individual 
transitions in the net the whole program for controlling the mobile robot can be rewritten and retested 
with the minimum difficulty. The Grobner basis tests would form an important part of the software, 
particularly in terms of safety. One example this work could be applied to would be an autonomous 
excavator. By using the Petri net representation, modifications to the control of the excavator could 
be made in the field, without the requirement for on site programming expertise. The Grobner basis 
testing would provide a catalogue of reachable markings. If any undesirable (dangerous) states of the 
Petri net were shown to be reachable, this problem could be rectified by further alteration to the net 
until the model was shown to be satisfactory. 



5.3 Streamed Petri Nets 

We are interested in Petri nets that can model systems involving streams of data. Places will hold 
ordered lists of coloured tokens rather than unordered sets of tokens. This introduces a degree of 
noncommutativity into the Petri net. The Grobner basis situation is more interesting here than with 
the ordinary Petri nets. Undecidability of the word problem [1C] indicates the existence of streamed 
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Petri nets for which it is not possible to determine whether or not a state is reachable. The streamed 
models we have worked with store the streams of data as stacks or allow random access to any 
substream of data within a given stream. The problem with this is that the type of streamed Petri 
net suitable for our more advanced models is one whose transitions read data streams from the left 
and build them up on the right. This is a net to which we cannot yet apply Grobner basis theory, but 
hope to investigate in future work. 

5.4 Enhanced Petri Nets 

Inhibitor arcs are the simplest extension to a basic Petri net. The inhibitor arc is represented by a 
line with a small circle at the end, equivalent to the NOT in switching theory, and is used to prevent a 
transition from firing. If a transition t has an inhibitor arc from a place p then t is enabled only when 
there are tokens in all of its ordinary input places and no tokens in the place p. The inhibitor arcs 
provide an alternative method of forcing a decision between two enabled transitions. These decisions 
can also be made randomly, or with the use of colours, but in this specific case, the inhibitor arc 
can give one transition priority over the other by preventing the second transition from firing. This 
method of decision making could be useful in any system where one function should be given priority 
over another. For instance, if a Petri net driving a mobile robot detected an obstruction, it would 
be important that it should stop, or alter the speed of the motors before attempting to read any sensors. 

It is interesting to consider how the Grobner basis methods could be extended to cover variations of 
the Petri net theory, especially when the results of the extensions are motivated by the requirement 
for testing modifications to navigation systems. 

5.5 Linked Petri Nets 

The motivation for our work has been the application to control systems of mobile robots, using the 
TRAMP philosophy (Toolkit for Rapid Autonomous Mobile Prototyping). It allows the analysis of 
different control components of a single mobile robot and it would be desirable for the Petri nets to 
be logically linked to provide a unified model of the control of the device. The analysis of the nets by 
Grobner bases should then be extended to provide an analysis of the model as a whole. The problem 
of the subdivision of a large net into suitable components (objects) and the extension of local analyses 
of such components to global checks on reachability, safety etc, are examples of the well known local 
to global problem. 
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